$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa File: ebd76a09-c746-3e90-b835-0218552a1e60.roa (raw, json) Hash identifier: MUbMD/Lhx/9WbCAKTmEWt28g0ZtbEbg3CCaUc8OC87s= Subject key identifier: FE:44:C1:6B:17:67:E9:49:86:06:FE:B4:84:A3:8F:8D:06:25:67:02 Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F43285848FD56CFF38FD5BD5447BA3940 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 27313 IP address blocks: 204.79.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cf:f3:8f:d5:bd:54:47:ba:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=0846ceca-1c76-4982-b9e6-a639b65c0704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0d:fe:f4:ab:b4:a3:22:52:be:2f:c7:91:bf: 4b:71:4e:7e:88:47:56:30:47:24:e4:4a:6c:71:d9: 3b:cf:f3:58:7c:be:ed:8d:9f:6e:74:64:fe:89:0e: 5d:e8:2e:f0:da:28:d9:0d:87:5d:6d:28:ab:d8:eb: 0f:89:01:6a:54:39:30:55:7e:b9:54:66:40:f0:6f: 92:ba:bd:28:3b:ae:ed:39:ae:c7:65:f4:ed:cf:0d: d7:e0:29:55:c0:87:f0:b0:29:f3:98:85:54:79:c7: 4a:bb:cc:87:16:e1:fd:4c:9a:a9:a9:62:2c:c9:22: 48:c6:cb:67:55:4b:11:ce:68:67:13:cf:b3:a8:44: c4:0e:f0:b8:04:06:a1:94:1f:c0:9c:72:7d:e3:22: d6:38:ae:36:d3:3c:9e:6e:48:11:fc:17:53:bf:f0: 4a:fa:23:33:38:a3:d0:15:47:c5:a4:11:40:84:86: b5:ee:06:5c:0f:89:fe:83:ab:0d:1a:75:e5:e5:4e: ed:1c:1e:18:d2:e7:6e:2b:27:0e:39:02:8d:b7:5d: 4e:26:4c:b1:d3:7a:5c:9f:e6:18:b2:e5:1d:b8:0e: 88:af:10:bb:70:09:80:bf:87:39:51:fb:94:90:d7: e1:0e:3a:5c:57:63:c8:f6:07:0e:2b:cb:56:5f:c4: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:44:C1:6B:17:67:E9:49:86:06:FE:B4:84:A3:8F:8D:06:25:67:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: 204.79.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4b:6e:c6:4a:e9:b6:07:86:ed:05:7d:e1:f5:32:bf:be:cd: ef:cc:06:f0:c4:1b:fd:79:78:e2:b4:0f:99:f3:a8:96:5e:8c: 6d:da:a3:00:43:84:19:fe:95:d8:90:c6:53:6a:27:66:c7:75: cf:36:a3:26:91:d9:5b:77:3e:5c:09:1d:3e:26:2b:4b:fd:f3: 2b:b9:a8:44:89:c5:4d:ce:4d:47:be:ba:71:97:62:96:a2:0a: 51:96:3b:07:91:cb:72:eb:94:66:2e:12:1a:e6:1d:a7:68:d0: 0b:5d:97:08:7d:c4:c6:52:ed:c1:4e:a6:e0:59:85:17:d1:27: 70:a9:7c:fd:29:5c:54:0c:77:42:88:64:64:4b:dc:7f:58:cc: 86:99:d2:e8:0a:60:12:58:64:21:16:21:2c:03:6e:d4:0c:ee: da:9a:ef:c3:0b:02:13:b8:22:db:83:7d:bb:d7:18:62:68:40: 39:ec:d3:98:73:1d:61:31:24:68:01:28:46:a5:da:ad:43:3b: 01:d0:98:15:4b:97:b3:0c:fa:3d:7f:b4:15:cc:a1:d6:9d:31: 8c:c0:dd:84:cd:7a:33:84:bd:32:62:ca:c3:a1:e9:41:ab:3a: d4:e4:6a:00:b8:57:f1:b1:98:f9:cb:13:75:1b:49:f4:0e:11: ae:40:42:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs/zj9W9VEe6OUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDg0NmNlY2EtMWM3Ni00OTgyLWI5ZTYtYTYzOWI2NWMwNzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw3+9Ku0oyJSvi/Hkb9LcU5+iEdWMEck5Eps cdk7z/NYfL7tjZ9udGT+iQ5d6C7w2ijZDYddbSir2OsPiQFqVDkwVX65VGZA8G+S ur0oO67tOa7HZfTtzw3X4ClVwIfwsCnzmIVUecdKu8yHFuH9TJqpqWIsySJIxstn VUsRzmhnE8+zqETEDvC4BAahlB/AnHJ94yLWOK420zyebkgR/BdTv/BK+iMzOKPQ FUfFpBFAhIa17gZcD4n+g6sNGnXl5U7tHB4Y0uduKycOOQKNt11OJkyx03pcn+YY suUduA6IrxC7cAmAv4c5UfuUkNfhDjpcV2PI9gcOK8tWX8RrgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5EwWsXZ+lJhgb+tISjj40GJWcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvZWJkNzZhMDktYzc0Ni0z ZTkwLWI4MzUtMDIxODU1MmExZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9LbsZK6bYHhu0FfeH1Mr++ze/MBvDEG/15eOK0D5nzqJZejG3aowBD hBn+ldiQxlNqJ2bHdc82oyaR2Vt3PlwJHT4mK0v98yu5qESJxU3OTUe+unGXYpai ClGWOweRy3LrlGYuEhrmHado0Atdlwh9xMZS7cFOpuBZhRfRJ3CpfP0pXFQMd0KI ZGRL3H9YzIaZ0ugKYBJYZCEWISwDbtQM7tqa78MLAhO4ItuDfbvXGGJoQDns05hz HWExJGgBKEal2q1DOwHQmBVLl7MM+j1/tBXModadMYzA3YTNejOEvTJiysOh6UGr OtTkagC4V/GxmPnLE3UbSfQOEa5AQkg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:19:44 2025 by rpki-client